What is BPINA?

BPINA protects Pennsylvania residents from misuse of their personal information. The Act mandates the protection of such information by businesses operating in the state and outlines an organization’s obligations to its customers in the event of a security breach.

BPINA also informs businesses on the appropriate methods for notifying Pennsylvania residents who may be unduly affected by a security breach, including special requirements for large-scale security breaches.

Who is affected by BPINA?

The Act applies to all organizations operating in Pennsylvania and those maintaining records containing the personal information of Pennsylvania residents. The Act requires businesses to “provide notice of any breach of the security system to any resident… whose personal information was or is reasonably believed to have been accessed and acquired by an unauthorized person.” Under the Act, personal information is defined as the first name or initial and last name of an individual, in combination with one or more of the following pieces of information:

a social security number

a driver’s license number or state identification card number

a financial account number

a credit card or debit card number accompanied by applicable passwords or security codes

A violation of the Act constitutes an unfair trade practice under the Pennsylvania Unfair Trade Practices and Consumer Protection Law.

Your Partner in Regulatory Compliance

By purging outdated files or placing one of our locked security consoles in your office, PROSHRED® can assist your company in maintaining a document destruction program that meets BPINA regulations. Using state-of-the-art technology, our highly trained and certified security professionals efficiently shred all documents right on your premises. We give you the option to watch the shredding process and also provide you with a Certificate of Destruction that records each shred. Trust PROSHRED® as your partner in compliance for maintaining your document security program.